Privacy Policy

Last updated: 23 July 2026

This policy explains how Slept Pty Ltd ("Slept", "we", "us") collects, uses, shares, and protects personal data when you use the Slept website (slept.app) and the Slept mobile app. Because Slept helps parents care for their baby's sleep, some of the data involved is about your child, not just you — we've written this policy to be clear about how that data is handled, and to meet the standard set by the EU/UK General Data Protection Regulation (GDPR) regardless of where you live.

1. Data controller & contact

The data controller responsible for your personal data is:

Slept Pty Ltd
Email: hello@sleptcoach.app

This is the contact point for any question about this policy, and for exercising any of the privacy rights described below.

2. Scope of this policy

This policy covers two things:

The Slept website (slept.app), which you can browse without an account. The website does not use cookies or analytics beyond what's strictly necessary to serve the pages you request. We'll update this policy if that changes.
The Slept mobile app, which requires an account and is where the data described below is actually collected and used.

3. What we collect

Account data

Your email address, and how you sign in (email and password, Sign in with Apple, or Google Sign-In). If you enable push notifications, we store a push token and your notification preferences.

Your child's profile

Your child's name, date of birth, and (if applicable) whether they are a twin or linked to a sibling profile. This is your child's personal data, which you provide to us on their behalf as their parent or guardian — see Section 6.

Onboarding & behavioral information

To build a personalized sleep plan, we ask about your child's sleep associations and aids, prior sleep-training attempts, who handles night wake-ups in your household, your child's temperament, how they fall asleep, their distress behavior at put-down, your room setup (including whether you use a baby monitor), and any free-text goals or constraints you share with us.

Sleep logs

Events you log — naps, bedtime, night wakes, feeds, fussing, escalating or calming, rescues, and resettling — along with timestamps, durations, and any notes you add, whether entered via chat or Quick Tap.

AI coach conversations & AI-generated content

Your full conversation history with the Slept AI coach, the sleep plans generated for your child, the behavioral "rules" Slept infers about your child over time, and your daily morning summaries.

Subscription status

Your subscription plan and billing status, synced from Apple/Google via RevenueCat. We never receive or store your card details.

4. How we use it

To generate and adapt your child's personalized sleep plan
To power the AI sleep coach and respond to your messages and logged events
To generate morning summaries and track progress over time
To send push notifications you've opted into, timed to naps, bedtime, and wake windows
To manage your account, subscription, and provide support
To maintain the security and integrity of the service

5. Legal bases for processing

Where GDPR applies, we rely on the following legal bases:

Consent — for onboarding and behavioral data about your child, and for push notifications. You can withdraw consent at any time.
Performance of a contract — for account data, sleep logs, and AI coaching, which are necessary to provide the service you've signed up for.
Legitimate interests — for keeping the service secure and reliable, and for improving Slept, balanced against your rights.

6. Your child's data

Slept is designed to be used by parents and guardians, not directly by children. Only an adult account holder can create a child profile, enter information about their child, and manage that data. Slept is not intended for independent use by children, and we do not knowingly collect data directly from a child.

When you create a profile for your child, you are providing us with their personal data — including sleep and behavioral information that can be sensitive — as their parent or guardian, and you consent to that processing on their behalf so that we can provide the service to you. You remain in control of that data at all times: you can view, export, or delete your child's data from Settings in the app whenever you like (see Section 10).

We do not sell your child's data, and we do not use it for advertising.

7. AI processing

Slept's AI coach and plan generation are powered by Anthropic's Claude models. These calls are made only from our servers — your device never sends data directly to Anthropic. Relevant context (such as your child's age, logged events, and conversation history) is sent to Claude to generate coaching responses, plans, and summaries.

We do not use the data you enter into Slept to train third-party AI models without your explicit opt-in consent.

We share data only with the service providers (sub-processors) that help us run Slept, each bound by their own data protection obligations:

Supabase — our database, authentication, and backend hosting
Anthropic — powers the AI coach and plan generation (server-side only)
RevenueCat — manages subscription status synced from Apple and Google
Apple and Google — as sign-in providers (if you choose them) and as the app stores that process your subscription payment
Expo — delivers push notifications you've opted into
Vercel — hosts our website and web app build

We do not sell personal data, and we do not share it with advertisers.

9. International data transfers

Our service providers may process data in countries outside your own, including outside the European Economic Area (EEA) or United Kingdom. Where that happens, we rely on appropriate safeguards recognized under GDPR, such as Standard Contractual Clauses or a provider's certification under an equivalent adequacy framework, to protect your data to the same standard it would receive at home.

10. Data retention & deletion

We keep your data for as long as your account is active, so Slept can keep providing personalized coaching. We do not automatically delete or purge data on a fixed schedule.

You're in control of your data at all times from Settings in the app:

Export your data — download everything we hold about your account and child (profile, plans, logs, coach conversations, and more) as a file
Delete all data — clear your child's logs and history while keeping your account
Delete your account — permanently deletes your account and all associated data

11. Security

Every child's data is isolated at the database level using row-level security, so only your account can access it, and data is encrypted in transit. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard practices.

If you're located in the EEA or UK, you have the right to:

Access the personal data we hold about you and your child
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten")
Restrict or object to certain processing
Port your data to another service in a structured, machine-readable format
Withdraw consent at any time, without affecting processing already carried out
Lodge a complaint with your local data protection supervisory authority

Most of these — access, export, and deletion — are available directly in the app's Settings. For anything else, or if you'd rather email us, contact hello@sleptcoach.app and we'll respond within the timeframes required by law.

13. Your rights under the Australian Privacy Principles

Slept Pty Ltd is an Australian company and handles personal data in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This includes only collecting personal data by fair and lawful means, using and disclosing it only for the purposes described in this policy (or a related purpose you'd reasonably expect), and taking reasonable steps to keep it accurate, secure, and accessible to you.

You can request access to or correction of your personal data at any time — most easily via Settings in the app, or by emailing hello@sleptcoach.app. If you have a complaint about how we've handled your personal data, please contact us first so we can try to resolve it. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Your rights (other regions)

We apply the same rights described above — access, correction, deletion, and export — to all Slept users worldwide, regardless of where local law requires it. If your region provides additional rights, contact us at hello@sleptcoach.app and we'll help.

15. Cookies

The Slept website does not currently use analytics or advertising cookies. We only use what's strictly necessary to serve the site. If we introduce analytics or other cookies in the future, we'll update this policy and, where required, ask for your consent first.

16. Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you in the app. We encourage you to review this page periodically.

17. Contact us

Questions, requests, or concerns about this policy or your data: